Ref 

# 



Hits 



Search Query 



DBs 



Default 
Operator 



Plurals 



Time Stamp 



riii: 



4728 



L2 



1590903 



a; 



709 



L4 



605 



L5: 



60 



L6 



14 



L7 



31 



L8 



adcess$4 near5 (multipl$4 plural$5 
two) near5 database$4 



(access$4 near5 (multipl$4 
plural$5 two) near5 database$4) 
near5 (multipl$4 plural$5 two 
group$3) near5 user$4 access$4 

(access$4 near5 (multipl$4 
plural$5two) near5 database$4) 
near5 (multipl$4 plural$5 twb 
group$3) near5 ;user$4 nearS . 
access$4 

(access$4 near5 (multipl$4 
plural$5 two) near5 database$4) 
near5 ((multipl$4 plural$5 two 
group$3) near5 user$4 near5 
access$4) 

((access$4 near5 (multipl$4 
plural$5 two) near5 database$4) 
near5 ((multipl$4 plural$5 two 
group$3) near5 user$4 near5 
access$4)) and (access$4 near5 || 
definition$4) 

(database$4 near4 access$3 near5 
table$3) same ((multipl$4 
group$4) near5 user$4 nearlO 
(multipl$4 group$4) near8 
database$3) 

grant$4 near5 access$4 hear5 i 
;databas$4 near5igroup$4 i : 



(((access$4 near5 (multipl$4 
plural$5 two) near5 database$4) 
near5 ((multipl$4 plural$5 two 
group$3) near5 user$4 near5 
access$4)) and (access$4 near5 
definition$4)) and (access$4 near5 
(multipl$4 plural$5 two) near5 
database$4 near5 (control$3 
administrat$4)) 

grant$4;near5:access$4 near5 
databas$|4 near5 grbup$4 same ; 
meber near5 profil44 



iJS^PGPUB;:: 

USPAT; 

EPOjJPO; 

DERWENT; 

IBM.TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; ' 
EPO; JPO; 
DERWENT; 
IBMJTDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 

US-PGPUB; 
USPAT; : 
EPO; JPO; 
DERWENT; 

iiliiili 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT:, 
IBM TDB 



or;; 



On; 



2005/12/14 14:05 



OR 



ON 



2005/12/14 14:04 



OR 



ON; 



2005/12/14 



14:04 



OR 



ON 



2005/12/14 14:04 



OR;; 



ON 



2005/12/14 14:04 



OR 



ON 



2005/12/14 14:04 



OR; 



ON 



2005/12/14 14:05 



OR 



ON 



2005/12/14 14:04 



;OR;; 



ON 



2005/12/14 14:05 
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L10 



lip 



L12 



L14 



L16 



S2 



114 



89 



13074; 



1261314 



i473j 



grant$4 near5 access$4 near5 
databas$4 near5 group$4 same 
member$3 near5 profil44 



: gfant$4 near5 access$4 near5 
databas$4 near5 group$4 nearS 
!member$3 near5 prpfii$4 



access$4 near5 (multipl$4 plural$5 
two) near5 database$4 same 
member$4 near5 profil$3 



new nearS member$4 ; nean5 
profil$3 



13 and 2 



4andl4! 



3 and 14 



; a6cess$4; nea r5 (miilti p|$4 plura l$5; 
two) nearS database$4 



(access$4 near5 (multipl$4 
plural$5 two) near5 database$4) 
near5 (multipl$4 plural$5 two 
group$3) near5 user$4 access$4 

(access$4 near5 (multipl$4 
plural$5 two) nea r5 database^): 
nearS (multipl$4 plural$5 two 
;gfoUp$3); near5 user$4 near5 f 
:'access$4 ' 1. 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 

!USf?AT;;i ; ; 
EPO; JPO; 
IDERWENT; 
IBM.TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMjtjl I 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
: USPAT; L !! 
;EPO;JPO; 
! DERWENT; 
IBMJTpB;; 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; J : 
EPO; JPO; 
DERWENT; 
IBMITDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
: USPAT; :.: 
EPO; JPO; 
DERWENT; 
ilBMfDB^: 



OR 



OR!: 



OR 



OR! 



OR 



OR! 



OR 



!OR! 



OR 



!OR!! 



ON 



!ON! 



ON 



ON! 



ON 



ON 



ON 



ON 



ON 



!0N! 



2005/12/14 14:05 



!200M2/l4!i4;05!! 



2005/12/14 14:06 



2005/12/14 14:06;: 



2005/12/14 14:07 



2005/12/14 14:07 



2005/12/14 14:07 



2005/12/14 14:04 



2005/12/14 14:04 



2005/12/14 14:04; 
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54 413 (access$4 near5 (multipl$4 
plural$5 two) near5 database$4) 
near5 ((multipl$4 plural$5 two 
group$3) near5 user$4 near5 
access$4) 

55 : : i 46 ((access$4 near5 (multipl$4 
plural$5 two) near5 datapaise$4); 
near5 ((multipl$4 plural$5 two 
group$3) near5 user$4 near5 
;access$4)j!and:(access$4;near5 
definition$4) i'i 

56 18 grant$4 near5 access$4 near5 
databas$4 near5 group$4 



S7 ; 63092 (grbtip$4 ifiiiltipl$4 ) near5iuser$4| 
access$4 hear5 (graht$3 ^et$4) :;• 
near5 databases • 



S8 38 (group$4 multipl$4 ) near5 user$4 

near5 access$4 near5 (grant$3 
set$4) near5 databases 



S9 178 access$4 near5 (multipl$4 plural$5 

two) near5 database$4 near5 
(control$3 administrat$4) ^WW§i 



S10 2129 database$4 near4 access$3 near5 

table$3 



511 : 126: (database$4 near4 access$3 near5 
tabie$3) and ((multipl$4 group$4) 
near5 user$4 nearlO (multipl$4 
|gr6up$40:near8 database$3) 

512 10 (database$4 near4 access$3 near5 
table$3) same ((multipl$4 
group$4) near5 user$4 nearlO 
(multipl$4 group$4) near8 
database$3) 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

USrPGPUB; 
USPAT; 
EPO; JPG; 
DERWENT; 
IBM.TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; r 
EPO; JPO; 
DERWENT; 
iBHiTQB |1 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; ; ^ 
DERWENT:; 
IBM.TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; : 
EPO; JPO; 
DERWENT; 
IBWtDB; ; 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



OR 



OR;! 



OR 



ORii 




OR 



ORii 



OR 



ON 



iONi 



ON 



ON 



ON 



ON 




2005/12/14 14:04 



2005/12/14 14:04 



2005/12/14 14:04 



2004/03/17 11:09 



2004/03/17 11:10 



2004/03/17 11:151! 



2004/03/17 13:57 



2004/03/17 13:59 



2005/12/14 14:04 
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S13 



S15 



;S16H 



S17 



;si8: 



S19 



S20! 



S21 



(((access$4 near5 (multipl$4 
plural$5 two) nearS database$4) 
near5 ((multipl$4 plural$5 two 
group$3) near5 user$4 near5 
access$4)) and (access$4 near5 
definition$4)) and (access$4 near5 
(multipl$4 plural$5 two) near5 
database$4 near5 (control$3 
administrat$4)) 

51 (add$4 put^4) hear5datab^3 . . 
: NEAR5 user$4 near5 group$3 ; 



362 databas$3 NEAR5 user$4 near5 
(access$4 control$4) near5 
table$3 



29 (generat$4 creat$3 develop$4) 
near5 databas$3 NEAR5 user$4 h. ; 
near5 (access$4 control$4) near5 
tabi^$3 Jjj 

"6275825". pn. and (access$4 
near5 database$3) 



"6275825".pp. and (request$4 j;i 
i|ahS|iad6ess^4 n^ar5:database$3|: 



"6275825".pn. and (server$3) 



, :'6275825".pn. ; and ( user$4 
nearlO r^duest$4 same aecess$4P 
near5 database$3) 



"6275825".pn. and ( user$4 near7 
reqiiest$4 same access$4 near5 
database$3) 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB; 
USPAT, 
EPO;iJPO; : 
DERWENT;! 

iiBfptje;! j 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 

US-PGPUB; ; 
USPAT; 
EPO; JPO;: 
DERWENT; 
IBM^TDB : 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 

US-PGPUB; 
USPAT; : 
EPO; JPO; ; 
DERWENT;; 
IBM.TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 

US-PGPUB; 

USPATpiiilJi 
EPd-iJPb; : 
DERWENT; 
jlBM^TDB: 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



OR 



lORl 



OR 



OR 



OR 



OR 



OR 



ON 



ION! 



ON 



iONl 



ON 



ION 



ON 



ON 



ON 



2005/12/14 14:04 



2004/03/17! 14: 19i 



2004/03/17 14:20 



2004/03/17: 14i29! 



2004/03/17 14:30 



2004/03/17 1^34!! 



2004/03/17 14:33 



2004/03/17 14:34 



2004/03/17 14:41 
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S22 



rsm 



S24 



S25 



S26 



S27 



S28 



;S29 



S30 



isai 



2380224 



123! 



3694 



1906: 



412 



37 



"6275825".pn. and ( database$3 
same (information data)) 



"6275825".pn. and ( retriev$3 
"same database$3 same .-;:}.■• 
(information data)) , •• 



connection tempalt$4 



seryer$3 near4 connection$4 
hear4 templat$4 



database$4 near5 (access$4 
control$4) near5 (list$4 
document$4) 



S26 and (access$5 near5 database 
near5;|ist$4) 



S27 and ((user$4 client$4) near5 
(request$3 requir$4) near5 
access$4) 



S27 and (add $4 near5 : user$3 \ \ 
near5 group$4) 



"56675782".pn. 



S30 and (access$4 nearS 
request$4) 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 

OS^PGPUB;: 
USPAT; 
EPD; JPO; 
DERWENT; 
ilBMlTDB I 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB; 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

: US-PGPUB; 
USPAT; ill ".:! 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

iUS-PGPUB^ 
USPAT; \ 
EPO; JPO; III 
DERWENT; 
IBMTDB 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR| 



ON 



ON! 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



ON! 



2004/03/17 14:41 



2004/03/17114:45 



2004/03/17 14:45 



2004/03/17 14:46! 



2004/11/15 15:17 



2004/11/1515:38! 



2004/11/15 15:40 



2004/11/15 15:42 



2004/11/16 09:57 



2004/11/16 09:58/ 
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S32 


2 


"5675782".pn. 


US-PGPUB; 

1 I^PAT- 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2004/11/16 09:58 




lllllll 


S32 


! and (access$4 near5 




US-PGPUB;; 


ill 




Bill ||: 


2004/11/16 09:58 






request^) 








USPAT; 
! EPO;JP6;l 
: DERWENT^ 


























































IBMJTDB : : 










































S34 




1 


S32 and (access$4 near5 
request$4 same database$3) 




US-PGPUB; 

1 IQPAT- 
UjrM 1 , 

trU, JrU, 

DERWENT; 
IBM_TDB 


OR 




on ; 


2004/11/16 10:27 


HI \ 




ill 


; S32: and (fetriey$4 near 
nearS information) 


5 <prv<»rt4 


US-PGPUB;! J 


11 




M '• 


?hrw/i 1 /hifi i h-i i 














USPAT;; ii: 






























EPO; JPO; 
DERWENT;- 












S36 




1 


S32 and (retriev$4same server$4 
same information) 


IBMJTDB : 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 




on ; 


2004/11/16 10:13 




0: 


S32 and (retriev$4 same server$4 


US-PGPUB; 


ii^iiilP! 


ipN: ; 


2004/11/16 10:13 






same inTormation; ■; 






USPAT; 
!EP0;iJP^O;I 
DERWENT; 










S38 


1 


S32 and (entity$4 same 
database$3) 






IBMJTDB 
US-PGPUB; 

1 I^PAT- 

UJrn 1 , 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 




on ; 


2004/11/16 10:43 


; S39 




■ 0 


S32 


and (transmit$4 same , 


<\GL$3| 


US-PGPUB; 
USPAT; I; 
EPO; JPO; : 
DERWENT; 
IBMJTDB ||! 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 


ll 




on ; 


2004/11/1610:44;: 






S40 




0 


S32 and (accesst$4 same ACL$3) 


OR 


on ; 


2004/11/16 10:44 


S41 




111 


$32 


and (access$4 same ACL$3) 


US-PGPUB; 


liHii ii 


on ; 


2004/11/16 10;45 






















•USPAT^ 






























iEPO; JPO; : ' 
DERWENT; : 
IBM TDB J 
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S42 



S43 



S44 



S45 



S46 



S47 



S48 



S49 



S50 



IS51 



66245! 



66245 



4983 



60 



17 



892 



94 



S32 and (retriev$4 same ACL$3) 



iaccess$4 near5 database$4 



access$4 near5 database$4 



S44 and (access$4 near5 (list$4.1 
tabl$3)) near5 database$4 



S44 and (access$4 near5 (list$4 
tabl$3) near5 database$4 near5 
(respectiv$3) ) 



S46 and (access$3 near5 typ$4) 



S47 and (add$4 near5 group$3) 



access$4 near5 database$4 near5 
user$4 near5 (tabl$4 list$4) 



S49 same ( respectiv$4 near5 
database$3) 



S49 and ( respectiv$4 near5 
datebase$3) : 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWEIMT; 
IBM_TDB 

US-PGPUB; 

USPAT; : II 
EPO; JPO; 
iDEPxWENT;; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWEIMT; 
IBM_TDB i. 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWEIMT; 
IBM_TDB 

US-PGPUB; 
USPAT; !'■ 
EPO; JPO; 
DERWEIMT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWEIMT; 
IBM_TDB 

US-PGPUB; 
USPAT; : : 
EPO; JPO; : 
DERWEIMT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWEIMT; 
IBM_TDB 

US-PGPUB; 
USPAT' 
EPO; JPO;. 
dERWEIMTjii 
IBM.TDB 



OR 



OR 



OR 



OR: 



OR 



OR 



OR 



OR 



OR 



OR 



ON 



0|M: 



ON 



ON 



ON 



ON 



ON 



ON 



ON 



iOlMi 



2004/11/16 10:44 



2005/06/29 15:58 



2005/06/29 16:43 



2005/06/29 16:05 



2005/06/29 16:06 



2005/06/29 16:08 



2005/06/29 16:08 



2005/06/29 16:15 



2005/06/29 16:25 



2005/06/29 16:32 
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S52 



IS53:; 



S54 



S55L 



S56 



!S57!i 



S58 



S59 



S60 



28 



57 



19 



12 



S49 and ( respectiv$4 near5 
database$3 near5 user$4) 



user$4 near5 access$4 near5 
database$4 near5 i control$4 nearS 
list$4 



(group$3 multipl$4 distribut$4) 
near5 database$4 near5 control$4 
near5 list$4 



S53and S54 



S53 and (member$4 near5 
profil$4 ) 



S53 and (member$4!near5 list$4) 



"6085191".pn. 



S58 and (access$4 near9 
databass$4 ) 



S58 and (access$4 near9 
databas$4 ) 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 

USPAT;: 
EPO; JPO; 
bERWENT; 

ibmItdb 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 1 
USPAT; 
USOCR;; 
EPO; JPO;- 
DERWENT; 

liiHiiil 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; i i 

EPO; jpb;;;: 

DERWENT;: 
IBM_TDB 1 

US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 

US-PGPUB; 
USPAT; ; 
USOCR; 
EPO; JPO; 
DERWENT; 
;IBM_TDB HI 

US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 
IBM TDB 



OR 



OR 



OR 



or;; 



OR 



OR 



OR 



or;; 



OR 



ON 



On 



ON 



off;; 



ON 



ON 



OFF 



;off;; 



OFF 



2005/06/29 16:42 



2005/06/29 16:46 



2005/06/29 16:45 



2005/06/29 16:45 



2005/06/29 16:48 



2005/06/29 16:48 



2005/06/29 17:17 



2005/06/29 17:17 



2005/06/29 17:17 
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1 Fast detection of communication patterns in distributed executions 
Thomas Kunz, Michiel F. H. Seuren 

November 1997 Proceedings of the 1997 conference of the Centre for Advanced 

Studies on Collaborative research 
Publisher: IBM Press 

Full text available: ^ pdf(4.21 M3) Additional Information: full citation, abstract, references, index terms 

Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 



2 SpfiGiaLiSS^ 

Ronald J. Brachman, Brian C. Smith 
February 1980 ACM SIGART Bulletin, issue 70 

Publisher: ACM Press 

Full text available: "| |pdf(ia.13 MB) Additional Information: full citation , abstract 

In the fall of 1978 we decided to produce a special issue of the SIGART Newsletter 
devoted to a survey of current knowledge representation research. We felt that there 
were twe useful functions such an issue could serve. First, we hoped to elicit a clear 
picture of how people working in this subdiscipline understand knowledge representation 
research, to illuminate the issues on which current research is focused, and to catalogue 
what approaches and techniques are currently being developed. Secon ... 

3 Level JJiecM^ 
Tim Leehane 

September 1996 Proceedings of the 24th annual ACM SIGUCCS conference on User 

services 
Publisher: ACM Press 

Full text available: ^fid!L5J2.MBl Additional Information: MLcitation, references, indextenris 
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Elisa Bertino, Elena Ferrari 

August 2002 ACM Transactions on Information and System Security (TISSEC), volume s 

Issue 3 

Publisher: ACM Press 

Full text available* fl5| odf 678 34 K3j Addit ' onal Information: full citation , abstract, references , citings. Index 

terms 

XML (extensible Markup Language) has emerged as a prevalent standard for document 
representation and exchange on the Web. It is often the case that XML documents contain 
information of different sensitivity degrees that must be selectively shared by (possibly 
large) user communities. There is thus the need for models and mechanisms enabling the 
specification and enforcement of access control policies for XML documents. Mechanisms 
are also required enabling a secure and selective dissemina ... 

Keywords: Access control, XML, secure distribution 



5 Data.base.djrect 

|& John L. Berg 

November 1976 ACM SIGMOD Record , ACM SIGMIS Database, Volume 8 , 8 issue 4 , 2 
Publisher: ACM Press 

Full text available: ^.pdg9.9.5 M3) Additional Information: full, cjtatjon, abstract 

What information about data base technology does a manager need to make prudent 
decisions about using this new technology? To provide this information the National 
Bureau of Standards and the Association for Computing Machinery established a workshop 
of approximately 80 experts in five major subject areas. The five subject areas were 
auditing, evolving technology, government regulations, standards, and user experience. 
Each area prepared a report contained in these proceedings. The proceedings p ... 

Keywords: DBMS, auditing, cost/benefit analysis, data base, data base management, 
government regulation, management objectives, privacy, security, standards, technology 
assessment, user experience 



6 SpeciaJJs^ m 
system 

Raghu Ramakrishnan, Divesh Srivastava, S. Sudarshan, Praveen Seshadri 

April 1994 The VLDB Journal — The International Journal on Very Large Data Bases, 

Volume 3 Issue 2 

Publisher: Springer-Verlag New York, Inc. 

Full text available: ^.pdg3.03. MS) Additional Information: fuH.cjtatjon, abstract, references, citings 

CORAL is a deductive system that supports a rich declarative language, and an interface 
to C++, which allows for a combination of declarative and imperative programming. A 
CORAL declarative program can be organized as a collection of interacting modules. 
CORAL supports a wide range of evaluation strategies, and automatically chooses an 
efficient strategy for each module in the program. Users can guide query optimization by 
selecting from a wide range of control choices. The CORAL system provides ... 

Keywords: deductive database, logic programming system, query language 



7 XML access control: Access control of XML documents considering update 
^ operations 

^ Chung-Hwan Lim, Seog Park, Sang H. Son 

October 2003 Proceedings of the 2003 ACM workshop on XML security 
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Publisher: ACM Press 

Full text available: ^pdf{298.78 KB) Additional Information: full citation , abstract, references , index terres 

As a large quantity of information is presented in XML format on the Web, there are 
increasing demands for XML security. Until now, research on XML security has been 
focused on the security of data communication using digital signatures or encryption 
technologies. As XML is also used for a data representation of data storage, XML security 
comes to involve not only communication security but also managerial security. 
Managerial security is guaranteed through access control, but existing XML acces ... 

Keywords: XML document, XML update, access control 



8 Special issue: Al in engineering 
(M D. Sriram, R. Joobbani 

April 1985 ACM SIGART Bulletin, issue 92 
Publisher: ACM Press 

Full text available: ^ pdf{8.79 MS) Additional Information: full citation , abstract 

The papers in this special issue were compiled from responses to the announcement in 
the July 1984 issue of the SIGART newsletter and notices posted over the ARPAnet. The 
interest being shown in this area is reflected in the sixty papers received from over six 
countries. About half the papers were received over the computer network. 

9 iMgbjie EEl^ 

Yih-Farn Chen, Huale Huang, Rittwik Jana, Trevor Jim, Matti Hiltunen, Sam John, Serban 
Jora, Radhakrishnan Muthumanickam, Bin Wei 
July 2003 Wireless Networks, Volume 9 issue 4 
Publisher: Kluwer Academic Publishers 

Full text available: ^£df(2.90.M&}. Additional Information: MLoMtoQ, abstract, references, index tenr\s 

iMobile 1 is an enterprise mobile service platform that allows resource-limited mobile 
devices to communicate with each other and to securely access corporate contents and 
services. The original iMobile architecture consists of devlets that provide protocol 
interfaces to different mobile devices and infolets that access and transcode information 
based on device profiles. iMobile Enterprise Edition (iMobile EE) is a redesign of the 
original iMobile architecture to address the security, ... 

Keywords: content transcoding, middleware, mobile devices, mobile enterprise, mobile 
multimedia services 



Continuous program optimization: A case study 
Thomas Kistler, Michael Franz 

July 2003 ACM Transactions on Programming Languages and Systems (TOPLAS), 

Volume 25 Issue 4 

Publisher: ACM Press 

Full text available: Mp.dfi877.67 KB) Addltjonal Information: M.cltatjon, abstract, references, Mexterms, 
v review 

Much of the software in everyday operation is not making optimal use of the hardware on 
which it actually runs. Among the reasons for thjs discrepancy are hardware/software 
mismatches, modularization overheads introduced by software engineering 
considerations, and the inability of systems to adapt to users' behaviors.A solution to 
these problems is to delay code generation until load time. This is the earliest point at 
which a piece of software can be fine-tuned to the actual capabilities of the ... 

Keywords: Dynamic code generation, continuous program optimization, dynamic 




http://portal.acm. org/results.cfm?CFID=62988270&CFTOKEN=4772208&a... 12/14/2005 



Results (page 1): +access ^request +member +profile +add +respect +da... Page 4 of 6 



reoptimization 



11 A taxonomy for secure object-oriented databases 
'ij&k Martin S. Olivier, Sebastiaan H. von Solms 

March 1994 ACM Transactions on Database Systems (TODS), volume 19 issue l 

Publisher: ACM Press 

Full text available: "fl pdf(3,05 MB) Additional Information: full citation, abstract, references, citings, Index 
™ "■*■"*■" terms, review 

This paper proposes a taxonomy for secure object-oriented databases in order to clarify 
the issues in modeling and implementing such databases. It also indicates some 
implications of the various choices one may make when designing such a database. Most 
secure database models have been designed for relational databases. The object-oriented 
database model is more complex than the relational model. For these reasons, models for 
secure object-oriented databases are more complex than ... 

Keywords: formal security models, information security, multilevel secure databases, 
object-orientation 



12 HTTP Cookies: Standards, privacy, and politics 
David M. Kristol 

November 2001 ACM Transactions on Internet Technology (TOIT), volume l issue 2 
Publisher: ACM Press 

Full text available: fj pdf(390.38 KB) Additional '"formation: full citation , abstract references , citing. liKlex 

How did we get from a world where cookies were something you ate and where 
"nontechies" were unaware of "Netscape cookies" to a world where cookies are a hot- 
button privacy issue for many computer users? This article describes how HTTP "cookies" 
work and how Netscape's original specification evolved into an IETF Proposed Standard. I 
also offer a personal perspective on how what began as a straightforward technical 
specification turned into a political flashpoint when it tried to address nontechn ... 

Keywords: Cookies, HTTP, World Wide Web, privacy, state management 



13 Draft report of the Federal Internetworking Requirements PaneL and selected 
^ responses 
^ Diane Fountaine 

April 1994 ACM SIGCOMM Computer Communication Review, Volume 24 Issue 2 
Publisher: ACM Press 

Full text available: *®.p.dfi.4J.§.jMJB). Additional Information: Miration, index terms 
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^ September 2001 Journal on Educational Resources in Computing (JERIC) 
W Publisher: ACM Press 

Full text available' f53 pdf(513.63 K3) 
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15 A Comparison of the Relational and CODASYL Approaches to Data-Base 
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. Management 
Ann S. Michaels, Benjamin Mittman, C. Robert Carlson 
January 1976 ACM Computing Surveys (CSUR), Volume 8 issue l 

Publisher: ACM Press 

Full text available: 'P| pdf?2.05 M3) Additional Information: full citation, references, citings , index terms 



16 Eariy.us^ 
^ online environments 
^ Jack G. Conrad, Joanne R. S. Claussen 

January 2003 ACM Transactions on Information Systems (TOIS), volume 21 issue 1 

Publisher: ACM Press 

Full text available: *g | pdf(845.54 KB) Additional Information: full citation , abstract, references, index terms 

The continued growth of very large data environments such as Westlaw and Dialog, in 
addition to the World Wide Web, increases the importance of effective and efficient 
database selection and searching. Current research focuses largely on completely 
autonomous and automatic selection, searching, and results merging in distributed 
environments. This fully automatic approach has significant deficiencies, including reliance 
upon thresholds below which databases with relevant documents are not search ... 

Keywords: Database selection, metadata for retrieval, structuring information to aid 
search and navigation, user interaction 




17 Modeln^ 

■jM Piero Fraternali, Paolo Paoiini 

W= October 2000 ACM Transactions on Information Systems (TOIS), Volume 18 issue 4 
Publisher: ACM Press 

Full text available: fbd«S.94 M3\ Additional Information: Ml^MiQn, abstract, references, .citings, index 
terms 

This paper describes a methodology for the development of WWW applications and a tool 
environment specifically tailored for the methodology. The methodology and the 
development environment are based upon models and techniques already used in the 
hypermedia, information systems, and software engineering fields, adapted and blended 
in an original mix. The foundation of the proposal is the conceptual design of WWW 
applications, using HDM-lite, a notation for the specification of structure, nav ... 

Keywords: HTML, WWW, application, development, intranet, modeling 



18 Statistical profile estimation in database systems 
^ Michael V. Mannino, Paicheng Chu, Thomas Sager 

September 1988 ACM Computing Surveys (CSUR), volume 20 issue 3 

Publisher: ACM Press 

Full text available' f^ l pdff2.9 4 M3i Additional Information: full citation , abstract, references, citings , Index 
' ^ terms 

A statistical profile summarizes the instances of a database. It describes aspects such as 
the number of tuples, the number of values, the distribution of values, the correlation 
between value sets, and the distribution of tuples among secondary storage units. 
Estimation of database profiles is critical in the problems of query optimization, physical 
database design, and database performance prediction. This paper describes a model of a 
database of profile, relates this model to estimating ... 
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1 9 A jcgnGsu 

Thomas A. Mueck, Martin L. Polaschek 

November 1997 The VLDB Journal — The International Journal on Very Large Data 

Bases, Volume 6 Issue 4 

Publisher: Springer-Verlag New York, Inc. 

Full text available: ^ | pdf(4H.47 KB) Additional Information: full citation, abstract, citings, index terms 

With respect to the specific requirements of advanced OODB applications, index data 
structures for type hierarchies in OODBMS have to provide efficient support for 
multiattribute queries and have to allow index optimization for a particular query profile. 
We describe the multikey type index and an efficient implementation of this indexing 
scheme. It meets both requirements: in addition to its multiattribute query capabilities it 
is designed as a mediator between two standard design altern ... 

Keywords: Access methods, Indexing, Multiple inheritance, OODB, Type hierarchies 



20 Deadlock detection in distributed database systems: a new algorithm and a 
comparative performance analysis 
Natalija Krivokapic, Alfons Kemper, Ehud Gudes 

October 1999 The VLDB Journal — The International Journal on Very Large Data 

Bases, Volume 8 Issue 2 

Publisher: Springer-Verlag New York, Inc. 

Full text available: * gpdf(289.96 KB) Additional Information: full citation, abstract , citings , index terms 

This paper attempts a comprehensive study of deadlock detection in distributed database 
systems. First, the two predominant deadlock models in these systems and the four 
different distributed deadlock detection approaches are discussed. Afterwards, a new 
deadlock detection algorithm is presented. The algorithm is based on dynamically creating 
deadlock detection agents (DDAs), each being responsible for detecting deadlocks in one 
connected component of the global wait-for-graph (WFG). The ... 

Keywords: Comparative performance analysis, Deadlock detection, Distributed database 
systems, Simulation study 
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21 An integrated approach to engineer and enforce context constraints in RBAC §11 
] M> environments 

^ Mark Strembeck, Gustaf Neumann 

August 2004 ACM Transactions on Information and System Security (TISSEC), Volume l 

Issue 3 

Publisher: ACM Press 

Full text available: ^.pdf(3,06 MB) Additional Information: Ml .citation, abstract, references, index terras 

We present an approach that uses special purpose role-based access control (RBAC) 
constraints to base certain access control decisions on context information. In our 
approach a context constraint is defined as a dynamic RBAC constraint that checks the 
actual values of one or more contextual attributes for predefined conditions. If these 
conditions are satisfied, the corresponding access request can be permitted. Accordingly, 
a conditional permission is an RBAC permission that is co ... 

Keywords: Context-dependent access control, constraints engineering, context 
constraints, role-based access control 



22 Manageabjiity,.av^ ||| 

i& bM§d. mail. service 

Yasushi Saito, Brian N. Bershad, Henry M. Levy 

August 2000 ACM Transactions on Computer Systems (TOCS), volume 18 issue 3 
Publisher: ACM Press 

Full text available: *g[pd^2J2 .MB) Additional Information: M. citation, abstract, j^r^ces, jnd^iexms 

This paper describes the motivation, design and performance of Porcupine, a scalable mail 
server. The goal of Porcupine is to provide a highly available and scalable electronic mail 
service using a large cluster of commodity PCs. We designed Porcupine to be easy to 
manage by emphasizing dynamic load balancing, automatic configuration, and graceful 
degradation in the presence of failures. Key to the systenVs manageability, availability, 
and performance is that sessions, data, and underlying ... 

Keywords: cluster, distributed systems, email, group membership protocol, load 
balancing, replication 
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23 Apubijsh/subscr!^ 

C. Liebig, M. Cilia, M. Betz, A. Buchmann 

April 2000 IFIP/ACM International Conference on Distributed systems platforms 
Publisher: Springer-Verlag New York, Inc. 

Full text available: ^pdf(2M S2.KB) Additional Information: fuj]. citation, abstract, references, citings 

An important class of information dissemination applications requires l:n communication 
and access to persistent datastores. CORBA's new Persistent State Service combined with 
messaging capabilities offer the possibility of efficiently realizing information brokers 
between data sources and CORBA clients. In this paper we present a prototype 
implementation of the PSS that exploits the reliable multicast capabilities of an existing 
middleware platform. This publish/subscribe architecture makes ... 

24 Design and evaluation of a replicated database for mobile systems 
S. Palazzo, A. Puliafito, M. Scarpa 

March 2000 Wireless Networks, volume 6 issue 2 
Publisher: Kluwer Academic Publishers 

Full text available: < gl| pdf(251.84 K3) Additional Information: full citation , abstract , references, index terms 

The new generation mobile systems are anticipated to provide mobile users with new 
broadband services such as wireless multimedia, including real&dash;time video and 
high&dash;speed data. In these systems, the requirement on service transparency placed 
by the handling of mobility, both personal and terminal, implies a remarkable increase in 
the complexity of data management. Therefore, appropriate distributed databases 
&lpar;DDB&rpar; must be designed to guarantee speed in the processing an ... 

25 Efficiently serving dynamic data at highly accessed web sites 

James R. Challenger, Paul Dantzig, Arun Iyengar, Mark S. Squillante, Li Zhang 
April 2004 IEEE/ACM Transactions on Networking (TON), Volume 12 issue 2 
Publisher: IEEE Press 

Full text available: ^ pdf(499.05 KB) Additional Information: full citation , abstract , references , index terras 

We present architectures and algorithms for efficiently serving dynamic data at highly 
accessed Web sites together with the results of an analysis motivating our design and 
quantifying its performance benefits. This includes algorithms for keeping cached data 
consistent so that dynamic pages can be cached at the Web server and dynamic content 
can be served at the performance level of static content. We show that our system design 
is able to achieve cache hit ratios close to 100% for cached data ... 

Keywords: caching, dynamic content, performance analysis, prefetching, stochastic 
models, web sites 



26 Query evaluation techniques for large databases 
Goetz Graefe 

^ June 1993 ACM Computing Surveys (CSUR), volume 25 issue 2 
Publisher: ACM Press 

Full text available: l|pd*9.37 M3) Additional Information: full citation, abstract, references, citings, Index 
v terms, review 

Database management systems will continue to manage large data volumes. Thus, 
efficient algorithms for accessing and manipulating large sets and sequences will be 
required to provide acceptable performance. The advent of object-oriented and extensible 
database systems will not solve this problem. On the contrary, modern data models 
exacerbate the problem: In order to manipulate large sets of complex objects as 
efficiently as today's database systems manipulate simple records, query-processi ... 
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Keywords: complex query evaluation plans, dynamic query evaluation plans, extensible 
database systems, iterators, object-oriented database systems, operator model of 
parallelization, parallel algorithms, relational database systems, set-matching algorithms, 
sort-hash duality 



27 I§chn]cal.Papers;..W^ 

Yunjuan Xie, Vir V. Phoha 
^ October 2001 Proceedings of the 1st international conference on Knowledge capture 
K-CAP '01 

Publisher: ACM Press 

Full text available- W\ pdf'200 21 KB) Additional Information: fulicitatjon, abstract, references, citings, Index 

" terms 

In this work, we present a novel approach to clustering Web site users into different 
groups and generating common user profiles. These profiles can be used to make 
recommendations, personalize Web sites, and for other uses such as targeting users for 
advertising. By using the concept of mass distribution in Dempster-Shafer's theory, the 
belief function similarity measure in our algorithm adds to the clustering task the ability to 
capture the uncertainty among Web user's navigation behavior. Our ... 

Keywords: Dempster-Shafer, access log, clustering, common user profile, 
personalization, web mining 



28 A.secure.an^ 
£g£ Pino Persiano, Ivan Visconti 

W November 2003 ACM Transactions on Information and System Security (TISSEC), 

Volume 6 Issue 4 

Publisher: ACM Press 

Full text available: pdf(241.65 KS) Additional Information: full citation, abstract, references, index terras 

In this paper we study privacy issues regarding the use of the SSL/TLS protocol and 
X.509 certificates. Our main attention is placed on subscription-based remote services 
(e.g., subscription to newspapers and databases) where the service manager charges a 
flat fee for a period of time independent of the actual number of times the service is 
requested. We start by pointing out that restricting the access to such services by using 
X.509 certificates and the SSL/TLS protocol, while preserving the in ... 

Keywords: Access control, anonymity, cryptographic algorithms and protocols, privacy, 
world-wide web 




29 Effective access to large audiovisual assets based on user preferences 
S. Ioannou, G. Moschovitis, K. Ntalianis, K. Karpouzis, S. Kollias 
November 2000 Proceedings of the 2000 ACM workshops on Multimedia 
Publisher: ACM Press 

Full text available: ^.pdf(1 ,01. MS) Additional Information: Mi.cltatjon, abstract, references, indexjeras 

Current multimedia databases contain a wealth of information in the form of audiovisual, 
as well as text data. Even though efficient search algorithms have been developed for 
either media, there still exists the need for abstract presentation and summarization of 
the results of database users' queries. Moreover, multimedia retrieval systems should be 
capable of providing the user with additional information related to the specific subject of 
the query, as well as suggest other topics which us ... 

Keywords: multimedia databases, query expansion, text-based search, user profiling, 



http://portal.acm.org/results.cfm?query=%2Baccess°/o20%2Brequest%20... 12/14/2005 



Results (page 2): +access ^request +member ^-profile +add +respect +da... Page 4 of 7 



web access 



30 Migrating to role-based access control 
Kami Brooks 

W: October 1999 Proceedings of the fourth ACM workshop on Role-based access control 
Publisher: ACM Press 



Full text available: 1 



Additional Information: full citation , references , index terms 



Keywords: Tivoli Management Environment, enterprise systems management, migration, 
role-based access control, security management 



31 Speciaiissue.on.pr^ 




dMabasesystem 

Jayen Vaghani, Kotagiri Ramamohanarao, David B. Kemp, Zoltan Somogyi, Peter J. Stuckey, 
Tim S. Leask, James Harland 

April 1994 The VLDB Journal — The International Journal on Very Large Data Bases, 

Volume 3 Issue 2 

Publisher: Springer-Verlag New York, Inc. 

Full text available: ^.pdfi2.67. MB). Additional Information: full .citation, abstract references, citings 

Deductive databases generalize relational databases by providing support for recursive 
views and non-atomic data. Aditi is a deductive system based on the client-server model; 
it is inherently multi-user and capable of exploiting parallelism on shared-memory 
multiprocessors. The back-end uses relational technology for efficiency in the 
management of disk-based data and uses optimization algorithms especially developed 
for the bottom-up evaluation of logical queries involving recursion. The front ... 

Keywords: implementation, logic, multi-user, parallelism, relational database 



32 Constraints: An approach to engineer and enforce context constraints in an RBAC 
<A environment 

^ Gustaf Neumann, Mark Strembeck 

June 2003 Proceedings of the eighth ACM symposium on Access control models and 

technologies 
Publisher: ACM Press 

Full text available' ffij pdf(37 7 68 KB] Additional Information: MLcltatjon, abstract, references, citings, index 
* 1 terms 

This paper presents an approach that uses special purpose RBAC constraints to base 
certain access control decisions on context information. In our approach a context 
constraint is defined as a dynamic RBAC constraint that checks the actual values of one or 
more contextual attributes for predefined conditions. If these conditions are satisfied, the 
corresponding access request can be permitted. Accordingly, a conditional permission is 
an RBAC permission which is constrained by one o ... 

33 Managea^ 
based 

Yasushi Saito, Brian N. Bershad, Henry M. Levy 

December 1999 ACM SIGOPS Operating Systems Review , Proceedings of the 

seventeenth ACM symposium on Operating systems principles SOSP 

'99, Volume 33 Issue 5 

Publisher: ACM Press 
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This paper describes the motivation, design, and performance of Porcupine, a scalable 
mail server. The goal of Porcupine is to provide a highly available and scalable electronic 
mail service using a large cluster of commodity PCs. We designed Porcupine to be easy to 
manage by emphasizing dynamic load balancing, automatic configuration, and graceful 
degradation in the presence of failures. Key to the system's manageability, availability, 
and performance is that sessions, data, and underlying serv ... 

34 Streams, structures, spaces, scenarios, societies (5s): A formal model for digital 
libraries 

^ Marcos Andre Gongalves, Edward A. Fox, Layne T. Watson, Neill A. Kipp 

April 2004 ACM Transactions on Information Systems (TOIS), volume 22 issue 2 
Publisher: ACM Press 

Full text available- Mj>df(316 85 KB) Additional information: M.£M(Qft. abstract, references, citings, Index 
^ v terms , review 

Digital libraries (DLs) are complex information systems and therefore demand formal 
foundations lest development efforts diverge and interoperability suffers. In this article, 
we propose the fundamental abstractions of Streams, Structures, Spaces, Scenarios, and 
Societies (5S), which allow us to define digital libraries rigorously and usefully. Streams 
are sequences of arbitrary items used to describe both static and dynamic (e.g., video) 
content. Structures can be viewed as labeled directed gra ... 

Keywords: applications., definitions, foundations, taxonomy 
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Labeis and event processes in the asbestos operating system j 
Petros Efstathopoulos, Maxwell Krohn, Steve VanDeBogart, Cliff Frey, David Ziegler, Eddie 
Kohler, David Mazieres, Frans Kaashoek, Robert Morris 

October 2005 ACM SIGOPS Operating Systems Review , Proceedings of the twentieth 
ACM symposium on Operating systems principles SOSP '05, volume 39 issue 

5 

Publisher: ACM Press 

Full text available: ^ pelf (258 58 KB) Additional Information: full citation , abstract , references , index terres 

Asbestos, a new prototype operating system, provides novel labeling and isolation 
mechanisms that help contain the effects of exploitable software flaws. Applications can 
express a wide range of policies with Asbestos's kernel-enforced label mechanism, 
including controls on inter-process communication and system-wide information flow. A 
new event process abstraction provides lightweight, isolated contexts within a single 
process, allowing the same process to act on behalf of multiple users while ... 

Keywords: event processes, information flow, labels, mandatory access control, secure 
web servers 
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November 1999 ACM Transactions on Information and System Security (TISSEC), 

Volume 2 Issue 4 

Publisher: ACM Press 

Full text available- ^pdff 184.87 KB) Additional Information: full citation , abstract, references , citings, Index 

terrns, review 

We present a protocol for unlinkable serial transactions suitable for a variety of network- 
based subscription services. It is the first protocol to use cryptographic blinding to enable 
subscription services. The protocol prevents the service from tracking the behavior of its 
customers, while protecting the service vendor from abuse due to simultaneous or cloned 
use by a single subscriber. Our basic protocol structure and recovery protocol are robust 
against failure in protocol termination. ... 

Keywords: anoymity, blinding, cryptographic protocols, unlinkable serial transactions 
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The concurrency of transactions executing on atomic data types can be enhanced through 
the use of semantic information about operations defined on these types. Hitherto, 
commutativity of operations has been exploited to provide enchanced concurrency while 
avoiding cascading aborts. We have identified a property known as recoverability which 
can be used to decrease the delay involved in processing noncommuting operations while 
still avoiding cascading aborts. When an invoked ... 

Keywords: concurrency control, semantic information 
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We consider per-user profile replication as a mechanism for faster location lookup of 
mobile users in a personal communications service system. We present a minimum-cost 
maximum-flow based algorithm to compute the set of sites at which a user profile should 
be replicated given known calling and user mobility patterns. We show the costs and 
benefits of our replication algorithm against previous location lookup approaches through 
analysis. We also simulate our algorithm against other location ... 
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This paper describes NIST's enhanced RBAC model and our approach to designing and 
implementing RBAC features for networked Web servers. The RBAC model formalized in 
this paper is based on the properties that were first described in Ferraiolo and Kuhn 
[1992] and Ferraiolo et al. [1995], with adjustments resulting from experience gained by 
prototype implementations, market analysis, and observations made by Jansen [1988] 
and Hoffman [1996]. The implementation of RBAC for the Web (RBAC/Web) p ... 

Keywords: RBAC, Web arrows, World Wide Web, access control, authorization 
management, role based access 
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41 A structural view of the Cedar programming environment 
^ Daniel C. Swinehart, Polle T. Zellweger, Richard J. Beach, Robert B. Hagmann 
^ August 1986 ACM Transactions on Programming Languages and Systems (TOPLAS), 

Volume 8 Issue 4 

Publisher: ACM Press 

Full text available- fipdffe 32 MB). Additional Information: MLciMion, abstract, reMences, .cjtags, j^dex 
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This paper presents an overview of the Cedar programming environment, focusing on its 
overall structure— that is, the major components of Cedar and the way they are 
organized. Cedar supports the development of programs written in a single programming 
language, also called Cedar. Its primary purpose is to increase the productivity of 
programmers whose activities include experimental programming and the development of 
prototype software systems for a high-performance personal computer. T ... 



42 Secure virtual end 
<^ technojogjes 

^ May 200 i" ACM Transactions on Information and System Security (TISSEC), volume 4 

Issue 2 

Publisher: ACM Press 

Additional Information: full citation , abstract , refer 
reyjevy 



Full text available: f § pd f(462. 10 KB) 



The Secure Virtual Enclaves (SVE) collaboration infrastructure allows multiple 
organizations to share their distributed application objects, while respecting organizational 
autonomy over local resources. The infrastructure is transparent to applications, which 
may be accessed via a web server, or may be based on Java or Microsoft's DCOM. The 
SVE infrastructure is implemented in middleware, with no modifications to COTS operating 
systems or network protocols. The system enables dynamic updates to ... 

Keywords: Access control, coalition, collaborative system, group communication, 
middleware, security policy 
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The 1100 series systems are Sperry Univac's large-scale mainframe computer systems. 
Beginning with the 1107 in 1962, the 1100 series has progressed through a succession of 
eight compatible computer models to the latest system, the 1100/80, introduced in 1977. 
The 1100 series hardware architecture Is based on a 36-bit word, ones complement 
structure which obtains one operand from storage and one from a high-speed register, or 
two operands from high-speed registers. The 1100 Operating System ... 

Keywords: 1100 computer series, computer architecture, data management systems, 
end user facilities, executive control software, multiprocessing, multiprogramming, 
operating system, programming languages 



44 Disconnected processes, mechanisms and architecture for mobile e-business ; 
J. Sairamesh, S. Goh, I. Stanoi, S. Padmanabhan, C. S. Li 
December 2004 Mobile Networks and Applications, Volume 9 Issue 6 
Publisher: Kluwer Academic Publishers 

Full text available: ^ sdf(625.38 KB) Additional Information: full citation , abstract, references , index terms 

With the tremendous advances in hand-held computing and communication capabilities, 
rapid proliferation of mobile devices, and decreasing device costs, we are seeing a growth 
in mobile e-business in various consumer and business markets. In this paper, we present 
a novel architecture and framework for end-to-end mobile e-business applications (e.g., 
point of sales). The architecture takes into consideration disconnection, application 
context, synchronization, transactions and failure recovery ... 

Keywords: failure recovery, mobile commerce, mobile disconnection, mobile e-business, 
remote disconnection, seamless business transaction 
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H. Rex Hartson, Deborah Hix 

March 1989 ACM Computing Surveys (CSUR), Volume 21 issue 1 
Publisher: ACM Press 

Full text available: « pdf(7.97 MB) Additional Information: MlQitation, abstract, references, cjtings, index 
^ ***** ' terms , review 

Human-computer interface management, from a computer science viewpoint, focuses on 
the process of developing quality human-computer interfaces, including their 
representation, design, implementation, execution, evaluation, and maintenance. This 
survey presents important concepts of interface management: dialogue independence, 
structural modeling, representation, interactive tools, rapid prototyping, development 
methodologies, and control structures. Dialogue independence is th ... 
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48 Experiences with network -based user agents for mobile applications 
Thomas F. La Porta, Thomas Woo, Krishan K. Sabnani, Ramachandran Ramjee 
August 1998 Mobile Networks and Applications, volume 3 issue 2 
Publisher: Kluwer Academic Publishers 

Full text available: f Bpdf(631.57 KB) Additional Information: full citation, abstract, references, citings, Index 



terms 

Wireless networks are characterized by simple end devices and limited bandwidth. One 
solution to address these and other limitations of the wireless mobile environment that 
has been widely pursued is the placement of proxies, or agents, inside the network to 
assist with application processing that would normally take place on end devices. These 
agents can additionally manipulate data to reduce bandwidth requirements and assist in 
providing services. The design and implementation of a user a ... 

49 Two case studies of open source software development: Apache and Mozilla 
j& July 2002 ACM Transactions on Software Engineering and Methodology (TOSEM), 

Nr: Volume 11 Issue 3 

Publisher: ACM Press 

Full text available: ffi pdf(373.10 KB) Additional Information: fuHcitation, abstract, references, cjtinss, index 

~ terms , review 

According to its proponents, open source style software development has the capacity to 
compete successfully, and perhaps in many cases displace, traditional commercial 
development methods. In order to begin investigating such claims, we examine data from 
two major open source projects, the Apache web server and the Mozilla browser. By using 
email archives of source code change history and problem reports we quantify aspects of 
developer participation, core team size, code ownership, productivit ... 

Keywords: Apache, Mozilla, Open source software, code ownership, defect density, 
repair interval 



1 CJjent-server cgmputln 

£ Jin Jing, Abdelsalam Sum! Heial, Ahmed Elmagarmid 
June 1999 ACM Computing Surveys (CSUR), volume 3i issue 2 
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Full text available- fi pd£233 31 KB) Additional Information: MleMlQD, abstract, references, citings, index 
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Recent advances in wireless data networking and portable information appliances have 
engendered a new paradigm of computing, called mobile computing, in which users 
carrying portable devices have access to data and information services regardless of their 
physical location or movement behavior. In the meantime, research addressing 
information access in mobile environments has proliferated. In this survey, we provide a 
concrete framework and categorization of the various way ... 

Keywords: application adaptation, cache invalidation, caching, client/server, data 
dissemination, disconnected operation, mobile applications, mobile client/server, mobile 
compuing, mobile data, mobility awareness, survey, system application 
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Aleksander Binemann-Zdanowicz, Roland Kaschek, Klaus-Dieter Schewe, Bernhard Thalheim 
January 2004 Proceedings of the first Asian-Pacific conference on Conceptual 
modelling - Volume 31 CRPIT 04 

Publisher: Australian Computer Society, Inc. 

Full text available: ^.pdMl 3,81. KB.) Additional Information: Ml .citation, abstract, references 

Apart from completeness usability, performance and maintainability are the key quality 
aspects for Web information systems. Considering usability as key implies taking usage 
processes into account right from the beginning of systems development. Context- 
awareness appears as a promising idea for increasing usability of Web Information 
Systems. In the present paper we propose an approach to context-awareness of Web 
Information Systems that systematically distinguishes among the various important k ... 

Keywords: SiteLang, Web Information Systems, Web services, context-aware 
information systems, media objects 
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Christoforos Panayiotou, George Samaras 

December 2004 Mobile Networks and Applications, Volume 9 issue 6 
Publisher: Kluwer Academic Publishers 

Full text available: B || pdf?1.30 MB) Additional Information: full citation , abstract , references, index terms 

The needs of the wireless and mobile user regarding information access and services are 
quite different than those of the desktop user. This need is not about browsing the Web 
but about receiving personalized services that are highly sensitive to the immediate 
environment and requirements of the user. Personalization appears to be the most 
appropriate solution to this need. It comes into aid by creating personalized portals that 
are specific for the wireless user, which (a) are focus on the I ... 

Keywords: mobile agents, mobile computing, personalization, pervasive computing, 
wireless portals 





Dynamic Access Control: An access control model for dynamic ciient-side content 
Adam Hess, Kent E. Seamons 

June 2003 Proceedings of the eighth ACM symposium on Access control models and 



technologies 
Publisher: ACM Press 

Full text available: odf(608,.50 KB) Additional Information: MLcjtatjon, abstract, references, indexierriis 

The focus of access control in client/server environments is on protecting sensitive server 
resources by determining whether or not a client is authorized to access those resources. 
The set of resources are usually static, and an access control policy associated with each 
resource specifies who is authorized to access the resource. In this paper, we turn the 
traditional client/server access control model on its head, and address how to protect the 
sensitive content that clients disclose to serve ... 

Keywords: access control, authentication, credentials, trust negotiation 
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Office-by-Example (OBE) is an integrated office information system that has been under 
development at IBM Research. OBE, an extension of Query-by-Example, supports various 
office features such as database tables, word processing, electronic mail, graphics, 
images, and so forth. These seemingly heterogeneous features are integrated through a 
language feature called example elements. Applications involving example elements are 
processed by the database manager, an integrated ... 

55 An embedded domain-specific language for type-safe server-side web scripting 
^ Peter Thiemann 

^ February 2005 ACM Transactions on Internet Technology (TOIT), Volume 5 issue l 
Publisher: ACM Press 

Full text available: ' gjpdf(336.50 KB) Additional Information: full citation , abstract, references , index terms 

WASH/CGI is an embedded domain-specific language for server-side Web scripting. Due 
to its reliance on the strongly typed, purely functional programming language Haskell as a 
host language, it is highly flexible and-— at the same time— it provides extensive 
guarantees due to its pervasive use of type information. WASH/CGI can be structured into 
a number of sublanguages addressing different aspects of the application. The document 
sublanguage provides tools for the generation of parameteri ... 

Keywords: Interactive Web services, Web programming 
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Robert Wilensky, David N. Chin, Marc Luria, James Martin, James Mayfield, Dekai Wu 
December 1988 Computational Linguistics, Volume 14 issue 4 

Publisher: MIT Press 

Full text available: , 

^pdfC4 ; 41„MBi.?S!( Additional Information: full citation, abstract, references, citings 
Publisher Site 

UC (UNIX Consultant) is an intelligent, natural language interface that allows naive users 
to learn about the UNIX 2 operating system. UC was undertaken because the task was 
thought to be both a fertile domain for artificial intelligence (AI) research and a useful 
application of AI work in planning, reasoning, natural language processing, and knowledge 
representation.The current implementation of UC comprises the following components: a 
language analyzer, called ALANA, produces a repre ... 
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September 1999 ACM Computing Surveys (CSUR), volume 31 issue 3 
Publisher: ACM Press 

Full text available- fg jpdff524 60 KB) Addjtional Information: full citation, abstract, references, citings, Index 
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The exponential growth and capillar diffusion of the Web are nurturing a novel generation 
of applications, characterized by a direct business-to-customer relationship. The 
development of such applications is a hybrid between traditional IS development and 
Hypermedia authoring, and challenges the existing tools and approaches for software 
production. This paper investigates the current situation of Web development tools, both 
in the commercial and research fields, by identifying and characte ... 

Keywords: HTML, Intranet, WWW, application, development 
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59 Computer security (SEC): Mediation security specification and enforcement for 
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^ Li Yang, Raimund K. Ege, Huiqun Yu 

March 2005 Proceedings of the 2005 ACM symposium on Applied computing 

Publisher: ACM Press 

Full text available: ^.pdfj[16.CL79 KBJ. Additional Information: MLcitation, abstract, fefejences, index tenris 

Information sharing among heterogeneous databases requires increasing attention and 
poses a pressing need. Successful protection of information by an effective access control 
mechanism is a basic requirement for interoperation among heterogeneous data sources. 
However, most existing work on access control focuses on access control model and 
security related information, little effort is devoted to exploring access control on the 
semantic-related heterogeneous databases. No current work resolves ... 
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Object-oriented programming systems, language, and applications 

OOPSLA '94, Volume 29 Issue 10 

Publisher: ACM Press 

Full text available: ^pdfn.26 MB) Additional Information: full citation , abstract , references , index terras 

Two major issues related to storing program information in an OODB are sharing and 
clustering. The former is important since it prevents the database from consuming 
excessive disk space, while the latter is crucial, since it keeps clients running without 
thrashing. In our database, objects are shared across multiple programs' translation units, 
and are clustered by combining three techniques, namely, birth-order, death-order, and 
sharing-oriented clusterings. An initial experiment shows tha ... 
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1 Fast detection of communication patterns in distributed executions 
Thomas Kunz, Michiel F. H. Seuren 

November 1997 Proceedings of the 1997 conference of the Centre for Advanced 

Studies on Collaborative research 
Publisher: IBM Press 

Full text available: ^pdf(4.21 MB) Additional Information: full citation, abstract, references , index terms 

Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 

2 Le^lJlJechnicaLsupport in a distributed computing environment 

Tim Leehane 

September 1996 Proceedings of the 24th annual ACM SIGUCCS conference on User 

services 
Publisher: ACM Press 

Full text available: tf |pdfv5.73 MB) Additional Information: full citation , references, index terms 
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N^i August 2002 ACM Transactions on Information and System Security (TISSEC), volume 5 

Issue 3 

Publisher: ACM Press 

Full text available* ^pdf(678 34 K3i Additional Information: Ml. cjiatjon. abstract, references, citings, index 
^* """" terms 

XML (extensible Markup Language) has emerged as a prevalent standard for document 
representation and exchange on the Web. It is often the case that XML documents contain 
information of different sensitivity degrees that must be selectively shared by (possibly 
large) user communities. There is thus the need for models and mechanisms enabling the 
specification and enforcement of access control policies for XML documents. Mechanisms 
are also required enabling a secure and selective dissemina ... 
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5 HTTP Cookies: Standards, privacy, and politics H 
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^ November 2001 ACM Transactions on Internet Technology (TOIT), volume l issue 2 
Publisher: ACM Press 

Full text available: « odf(390.38 KB) Additional lnformation: MflttlftlL abstract, references, citin 5 s, index 
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How did we get from a world where cookies were something you ate and where 
"nontechies" were unaware of "Netscape cookies" to a world where cookies are a hot- 
button privacy issue for many computer users? This article describes how HTTP "cookies" 
work and how Netscape's original specification evolved into an IETF Proposed Standard. I 
also offer a personal perspective on how what began as a straightforward technical 
specification turned into a political flashpoint when it tried to address nontechn ... 

Keywords: Cookies, HTTP, World Wide Web, privacy, state management 
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October 2003 Proceedings of the 2003 ACM workshop on XML security 
Publisher: ACM Press 

Full text available: ^pdfi298.78 KB) Additional Information: full citation , abstract , references , index terms 

As a large quantity of information is presented in XML format on the Web, there are 
increasing demands for XML security. Until now, research on XML security has been 
focused on the security of data communication using digital signatures or encryption 
technologies. As XML is also used for a data representation of data storage, XML security 
comes to involve not only communication security but also managerial security. 
Managerial security is guaranteed through access control, but existing XML acces ... 

Keywords: XML document, XML update, access control 
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This paper describes a methodology for the development of WWW applications and a tool 
environment specifically tailored for the methodology. The methodology and the 
development environment are based upon models and techniques already used in the 
hypermedia, information systems, and software engineering fields, adapted and blended 



http://portal.acm. org/results.cfm?CFID=62988270&CFTOKEN=4772208&a... 12/14/2005 



Results (page 1): +access ^request +member ^profile +add +respect +da... Page 3 of 6 



in an original mix. The foundation of the proposal is the conceptual design of WWW 
applications, using HDM-lite, a notation for the specification of structure, nav ... 

Keywords: HTML, WWW, application, development, intranet, modeling 
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January 2003 ACM Transactions on Information Systems (TOIS), Volume 21 issue 1 
Publisher: ACM Press 

Full text available: ^£dj[845. .54.KB) Additional Information: M citation, abstract, references, index terms 

The continued growth of very large data environments such as Westlaw and Dialog, in 
addition to the World Wide Web, increases the importance of effective and efficient 
database selection and searching. Current research focuses largely on completely 
autonomous and automatic selection, searching, and results merging in distributed 
environments. This fully automatic approach has significant deficiencies, including reliance 
upon thresholds below which databases with relevant documents are not search ... 

Keywords: Database selection, metadata for retrieval, structuring information to aid 
search and navigation, user interaction 
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WASH/CGI is an embedded domain-specific language for server-side Web scripting. Due 
to its reliance on the strongly typed, purely functional programming language Haskell as a 
host language, it is highly flexible and— at the same time—it provides extensive 
guarantees due to its pervasive use of type information. WASH/CGI can be structured into 
a number of sublanguages addressing different aspects of the application. The document 
sublanguage provides tools for the generation of parameteri ... 

Keywords: Interactive Web services, Web programming 
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terms 

This paper presents an overview of the Cedar programming environment, focusing on its 
overall structure— that is, the major components of Cedar and the way they are 
organized. Cedar supports the development of programs written in a single programming 
language, also called Cedar. Its primary purpose is to increase the productivity of 
programmers whose activities include experimental programming and the development of 
prototype software systems for a high-performance personal computer. T ... 
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We present an approach that uses special purpose role-based access control (RBAC) 
constraints to base certain access control decisions on context information. In our 
approach a context constraint is defined as a dynamic RBAC constraint that checks the 
actual values of one or more contextual attributes for predefined conditions. If these 
conditions are satisfied, the corresponding access request can be permitted. Accordingly, 
a conditional permission is an RBAC permission that is co ... 

Keywords: Context-dependent access control, constraints engineering, context 
constraints, role-based access control 
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Current multimedia databases contain a wealth of information in the form of audiovisual, 
as well as text data. Even though efficient search algorithms have been developed for 
either media, there still exists the need for abstract presentation and summarization of 
the results of database users' queries. Moreover, multimedia retrieval systems should be 
capable of providing the user with additional information related to the specific subject of 
the query, as well as suggest other topics which us ... 

Keywords: multimedia databases, query expansion, text-based search, user profiling, 
web access 
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This paper presents an approach that uses special purpose RBAC constraints to base 
certain access control decisions on context information. In our approach a context 
constraint is defined as a dynamic RBAC constraint that checks the actual values of one or 
more contextual attributes for predefined conditions. If these conditions are satisfied, the 
corresponding access request can be permitted. Accordingly, a conditional permission is 
an RBAC permission which is constrained by one o ... 
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Recent advances in wireless data networking and portable information appliances have 
engendered a new paradigm of computing, called mobile computing, in which users 
carrying portable devices have access to data and information services regardless of their 
physical location or movement behavior. In the meantime, research addressing 
information access in mobile environments has proliferated. In this survey, we provide a 
concrete framework and categorization of the various way ... 

Keywords: application adaptation, cache invalidation, caching, client/server, data 
dissemination, disconnected operation, mobile applications, mobile client/server, mobile 
compuing, mobile data, mobility awareness, survey, system application 
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An important class of information dissemination applications requires l:n communication 
and access to persistent datastores. CORBA's new Persistent State Service combined with 
messaging capabilities offer the possibility of efficiently realizing information brokers 
between data sources and CORBA clients. In this paper we present a prototype 
implementation of the PSS that exploits the reliable multicast capabilities of an existing 
middleware platform. This publish/subscribe architecture makes ... 
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We present architectures and algorithms for efficiently serving dynamic data at highly 
accessed Web sites together with the results of an analysis motivating our design and 
quantifying its performance benefits. This includes algorithms for keeping cached data 
consistent so that dynamic pages can be cached at the Web server and dynamic content 
can be served at the performance level of static content. We show that our system design 
is able to achieve cache hit ratios close to 100% for cached data ... 
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The focus of access control in client/server environments is on protecting sensitive server 
resources by determining whether or not a client is authorized to access those resources. 
The set of resources are usually static, and an access control policy associated with each 
resource specifies who is authorized to access the resource. In this paper, we turn the 
traditional client/server access control model on its head, and address how to protect the 
sensitive content that clients disclose to serve ... 

Keywords: access control, authentication, credentials, trust negotiation 
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Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 
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XML (extensible Markup Language) has emerged as a prevalent standard for document 
representation and exchange on the Web. It is often the case that XML documents contain 
information of different sensitivity degrees that must be selectively shared by (possibly 
large) user communities. There is thus the need for models and mechanisms enabling the 
specification and enforcement of access control policies for XML documents. Mechanisms 
are also required enabling a secure and selective dissemina ... 
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How did we get from a world where cookies were something you ate and where 
"nontechies" were unaware of "Netscape cookies" to a world where cookies are a hot- 
button privacy issue for many computer users? This article describes how HTTP "cookies" 
work and how Netscape's original specification evolved into an IETF Proposed Standard. I 
also offer a personal perspective on how what began as a straightforward technical 
specification turned into a political flashpoint when it tried to address nontechn ... 

Keywords: Cookies, HTTP, World Wide Web, privacy, state management 



6 XML access control: Access control of XML documents cgn^derigg^ 
m operations 

^ Chung-Hwan Urn, Seog Park, Sang H. Son 

October 2003 Proceedings of the 2003 ACM workshop on XML security 
Publisher: ACM Press 

Full text available: ^ odfi298.78 KB) Additional Information: full citation , abstract , references , index terms 

As a large quantity of information is presented in XML format on the Web, there are 
increasing demands for XML security. Until now, research on XML security has been 
focused on the security of data communication using digital signatures or encryption 
technologies. As XML is also used for a data representation of data storage, XML security 
comes to involve not only communication security but also managerial security. 
Managerial security is guaranteed through access control, but existing XML acces ... 
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This paper describes a methodology for the development of WWW applications and a tool 
environment specifically tailored for the methodology. The methodology and the 
development environment are based upon models and techniques already used in the 
hypermedia, information systems, and software engineering fields, adapted and blended 
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in an original mix. The foundation of the proposal is the conceptual design of WWW 
applications, using HDM-lite, a notation for the specification of structure, nav ... 
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The continued growth of very large data environments such as Westlaw and Dialog, in 
addition to the World Wide Web, increases the importance of effective and efficient 
database selection and searching. Current research focuses largely on completely 
autonomous and automatic selection, searching, and results merging in distributed 
environments. This fully automatic approach has significant deficiencies, including reliance 
upon thresholds below which databases with relevant documents are not search ... 
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WASH/CGI is an embedded domain-specific language for server-side Web scripting. Due 
to its reliance on the strongly typed, purely functional programming language Haskell as a 
host language, it is highly flexible and— at the same time— it provides extensive 
guarantees due to its pervasive use of type information. WASH/CGI can be structured into 
a number of sublanguages addressing different aspects of the application. The document 
sublanguage provides tools for the generation of parameteri ... 
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This paper presents an overview of the Cedar programming environment, focusing on its 
overall structure— that is, the major components of Cedar and the way they are 
organized. Cedar supports the development of programs written in a single programming 
language, also called Cedar. Its primary purpose is to increase the productivity of 
programmers whose activities include experimental programming and the development of 
prototype software systems for a high-performance personal computer. T ... 
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We present an approach that uses special purpose role-based access control (RBAC) 
constraints to base certain access control decisions on context information. In our 
approach a context constraint is defined as a dynamic RBAC constraint that checks the 
actual values of one or more contextual attributes for predefined conditions. If these 
conditions are satisfied, the corresponding access request can be permitted. Accordingly, 
a conditional permission is an RBAC permission that is co ... 
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as well as text data. Even though efficient search algorithms have been developed for 
either media, there still exists the need for abstract presentation and summarization of 
the results of database users' queries. Moreover, multimedia retrieval systems should be 
capable of providing the user with additional information related to the specific subject of 
the query, as well as suggest other topics which us ... 
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This paper presents an approach that uses special purpose RBAC constraints to base 
certain access control decisions on context information. In our approach a context 
constraint is defined as a dynamic RBAC constraint that checks the actual values of one or 
more contextual attributes for predefined conditions. If these conditions are satisfied, the 
corresponding access request can be permitted. Accordingly, a conditional permission is 
an RBAC permission which is constrained by one o ... 

Jin Jing, Abdelsalam Sumi Helal, Ahmed Elmagarmid 
W June 1999 ACM Computing Surveys (CSUR), volume 31 issue 2 

Publisher: ACM Press 

Full text available: f Bpdff233.31 KB) Addjtional ,nformation: Relation, abstract, references, citings, index 

terms , review 

Recent advances in wireless data networking and portable information appliances have 
engendered a new paradigm of computing, called mobile computing, in which users 
carrying portable devices have access to data and information services regardless of their 
physical location or movement behavior. In the meantime, research addressing 
information access in mobile environments has proliferated. In this survey, we provide a 
concrete framework and categorization of the various way ... 
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An important class of information dissemination applications requires l:n communication 
and access to persistent datastores. CORBA's new Persistent State Service combined with 
messaging capabilities offer the possibility of efficiently realizing information brokers 
between data sources and CORBA clients. In this paper we present a prototype 
implementation of the PSS that exploits the reliable multicast capabilities of an existing 
middleware platform. This publish/subscribe architecture makes ... 

18 inside a software design team: knowledge acquisition, sharing, and integration 
Diane B. Walz, Joyce J. Elam, Bill Curtis 

October 1993 Communications of the ACM, volume 36 issue 10 
Publisher: ACM Press 

Full text available: Wi pdf(4,84 MB). Additional Information: full citation, references, citings, index terms , 
™ """"" """ review 



Keywords: case study, empirical studies of software development, requirements 
determination, software design teams, software management 



http://portal.acm.org/results.cfm?CFID=62988270&CFTOKEN=4772208&a... 12/14/2005 



Results (page 1): +access ^request +member +profile +add +respect +da... Page 6 of 6 



19 Efficiently serving dynamic data at highly accessed web sites 

James R. Challenger, Paul Dantzig, Arun Iyengar, Mark S. Squillante, Li Zhang 
April 2004 IEEE/ACM Transactions on Networking (TON), Volume 12 issue 2 
Publisher: IEEE Press 

Full text available: 'g] pdf(499.05 K3) Additional Information: full citation, abstract, references, index terms 

We present architectures and algorithms for efficiently serving dynamic data at highly 
accessed Web sites together with the results of an analysis motivating our design and 
quantifying its performance benefits. This includes algorithms for keeping cached data 
consistent so that dynamic pages can be cached at the Web server and dynamic content 
can be served at the performance level of static content. We show that our system design 
is able to achieve cache hit ratios close to 100% for cached data ... 
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The focus of access control in client/server environments is on protecting sensitive server 
resources by determining whether or not a client is authorized to access those resources. 
The set of resources are usually static, and an access control policy associated with each 
resource specifies who is authorized to access the resource. In this paper, we turn the 
traditional client/server access control model on its head, and address how to protect the 
sensitive content that clients disclose to serve ... 
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